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Abstract 

In this work, the problem of transmitting an i.i.d Gaussian source over an i.i.d Gaussian wiretap 
channel with an i.i.d Gaussian side information available at the intended receiver is considered. The 
intended receiver is assumed to have a certain minimum SNR and the eavesdropper is assumed to have 
a strictly lower SNR, compared to the intended receiver The objective is to minimize the distortion of 
source reconstruction at the intended receiver. In this work, it is shown that the source-channel separation 
coding scheme is optimum in the sense of achieving minimum distortion. Two hybrid digital-analog 
Wyner-Ziv coding schemes are then proposed which achieve the minimum distortion. These secure joint 
source-channel coding schemes are based on the Wyner-Ziv coding scheme and wiretap channel coding 
scheme when the analog source is not explicitly quantized. The proposed secure hybrid digital-analog 
schemes are analyzed under the main channel SNR mismatch. It is proven that the proposed schemes 
can give a graceful degradation of distortion with SNR under SNR mismatch, i.e., when the actual SNR 
is larger than the designed SNR. 

Index Terms 

MMSE Distortion, Hybrid Digital-Analog Coding, Secure Wireless Communication, Wiretap Chan- 
nel, SNR Mismatch, Threshold Effect. 



I. Introduction 

The notion of information theoretic secrecy in communication systems was first introduced in 
[HI. The information theoretic secrecy requires that the received signal by an eavesdropper not 
provide any information about the transmitted messages. Following the pioneering works of |f2| 
and [|3l which have studied the wiretap channel, many extensions of the wiretap channel model 
have been considered from a perfect secrecy point of view (see e.g., [|4l-[[8l). Particularly, in 
flU, [fTOl . the Gaussian wiretap channel of ifTTI is extended to the Gaussian wiretap channel with 
side information available at the transmitter. 

All extensions of the wiretap channel model have considered communicating a discrete source 
with perfect secrecy constraint. In many applications, however, a bandlimited analog source needs 
to be transmitted on a bandlimited Gaussian wiretap channel with side information available at 
the receiver. In many situations, the exact signal-to-noise ratio (SNR) of the main channel may 
not be known at the transmitter. Usually, a range of the main channel SNR is known but the 
true SNR value is unknown. Given a range of main channel SNR, such that the eavesdropper's 
signal is degraded with respect to the legitimate receiver's signal, it is desirable to design a 
single transmitter which has a robust performance for all ranges of SNRs. A common method 
of designing such a system is based on Shannon's source-channel separation coding: Quantize 
the analog source and then transmit the resulting discrete source by the digital secret wiretap 
channel coding scheme. The main advantage of a digital system is that it is more reliable and 
cost efficient. 

The inherent problem of digital systems is that they suffer from a severe form of "threshold 
effect" lfT2l . [fT3ll . This effect may be briefly described as follows: The system achieves a certain 
performance at a certain designed SNR. When the SNR is increased, however, the system 
performance does not improve and it degrades drastically when the true SNR falls below the 
designed SNR. The severity of the threshold effect in digital systems is related to Shannon's 
source-channel separation principle [fT4ll . Recent works on non-secure communication systems, 
however, have proven that joint source-channel coding schemes can not only outperform the 
digital systems for a fixed complexity and delay, they are also more robust against the SNR 
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variations. IfTSH-GOl. 

Some other schemes that exploit the advantage of analog systems are studied in [|2T1l - [|24ll and 
ll25l . These works are based on the so-called direct source-channel mapping technique which may 
briefly be explained as follows: the output of a source scalar/vector quantizer is mapped directly 
to a channel symbol using analog (or nearly analog) modulation, i.e., amplitude modulation or 
M-ary quadrature amplitude modulation (QAM). The direct source-channel codes have graceful 
degradation performance at low SNRs. In ll25l . a robust image coding system is presented which 
combines subband coding and QAM. This system allows various compression levels based on 
block-wise classification. An improved image coding system is then proposed in fT2\ which 
utilizes both bandwidth compression and bandwidth expansion mappings, where the bandwidth 
expansion mapping employs a quantization error. 

In [fTTll . several hybrid digital- analog joint source-channel coding scheme are proposed for 
transmitting a Gaussian source over a (non-secure) Gaussian channel (without side information). 
The main idea in IfTTl for increasing robustness is to reduce the number of quantization intervals, 
and thereby increase the distance between the decision lines of the quantization levels. This will 
increase the distortion, but in order to compensate the coarser representation, the quantization 
error is sent as an analog symbol using a linear coder (see also [|26l ). In [|27l , different coding 
schemes are analyzed for transmitting a Gaussian source over a Gaussian wiretap channel 
(without side information). For a fixed information leakage rate to the eavesdropper, [27] has 
shown that superimposing the secure digital signal with the analog (quantization error) part has 
better performance compared to the separation based scheme and the uncoded scheme. In f28l, 
the problem of transmitting a Gaussian source over a (non-secure) Gaussian channel with side 
information (either at transmitter or at receiver) is studied. Il28l has introduced several hybrid 
digital-analog forms of the Costa and Wyner-Ziv coding ( ||29l ) schemes. In [|28l . the results of 
||30l are extended to the case in which the transmitter or receiver has side information, and have 
shown that there are infinitely many schemes for achieving the optimal distortion. In the work 
of [fSTl, we considered the problem of transmitting a Gaussian source over a secure Gaussian 
channel with side information available at the transmitter and proposed different secure joint 
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source channel coding schemes based on the secret dirty paper coding and wiretap channel 

coding scheme. 

In this paper, we consider the problem of transmitting an i.i.d Gaussian source over an i.i.d 
Gaussian wiretap channel with side information available at the intended receiver. We assume 
that the intended receiver has a certain minimum SNR and the eavesdropper has a strictly lower 
SNR compared to the intended receiver. We are interested in minimizing the distortion of source 
reconstruction at the intended receiver. We show that, here, like the Gaussian wiretap channel 
without side information. Shannon's source-channel separation coding scheme is optimum in the 
sense of achieving the minimum distortion. We then propose two hybrid digital-analog secure 
joint source-channel coding schemes which achieve the minimum distortion. Our coding schemes 
are based on the Wyner Ziv coding scheme and wiretap channel coding scheme when the analog 
source is not explicitly quantized. We will illustrate that these schemes achieve the optimum 
distortion. We analyze our secure hybrid digital-analog schemes under the main channel SNR 
mismatch. We will show that our proposed schemes can give a graceful degradation of distortion 
with SNR under SNR mismatch, i.e., when the actual SNR is larger than the designed SNR. 

II. Preliminaries And Related Works 

A. Notation 

In this paper, random variables are denoted by capital letters (e.g. X) and their realizations are 
denoted by corresponding lower case letters (e.g. x). The finite alphabet of a random variable is 
denoted by a script letter (e.g. X) and its probability distribution is denoted by P{x). Similarly, 
the function P{x, y) represents the joint probability distribution function of the random variables 
X and Y. The vectors will be written as x^ = (xi,X2, ■■■,a:^n)> where subscripted letters denote 
the components and superscripted letters denote the vector. The notation x'^ denotes the vector 
(xj, Xj+i, ...,Xj) for j > i. A Gaussian Random variable X with a mean of fj, and variance of cr^ 
is denoted by X ~ j'V(//, ct^). The function E[.] represents a statistical expectation. The function 
I{X;Y) represents mutual information between random variables X and Y and A*^"^ denotes 
the set of strongly jointly typical sequences. 
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B. System Model And Problem Statement 

Source Model : Consider a memoryless Gaussian source of {V^j^i with zero mean and vari- 
ance (T^. Thus, Vi ~ A/^(0, al) and we assume that the sequence {V^} is independent and 
identically distributed (i.i.d). We assume that the source is obtained from uniform sampling 
of a continuous-time Gaussian process with bandwidth Ws{Hz). Furthermore, we assume that 
the sampling rate is 2Ws samples per second. 

Channel Model : The source is transmitted over an Additive White Gaussian Noise (AWGN) 
wiretap channel when the intended receiver has some side information about the source. The 
channel is therefore modeled as follows: 

F,= Xi + Wi, (1) 

where Xi, Yi, and Zi are the channel input, the received signal by the intended receiver and 
the received signal by the eavesdropper, respectively. We assume that -E'[-'^j^] < P, and Wj ~ 
X{0,Ni), Wi ~ AA(0, A^2), where N2 > Ni. Furthermore, assume that Tj's are a sequence of 
real i.i.d Gaussian random variables with zero mean and variance af, i.e. Tj ~ J\f{0,a^). Here 
V- and Tj are mutually independent Gaussian random variables. As the source, side information 
and the channel are i.i.d over the time, we will omit the index i throughout the rest of the 
paper. The channel is derived from a continuous-time AWGN wiretap channel with bandwidth 
Wc{Hz). The equivalent discrete-time channel is used at a rate of 2Wc channel uses per second. 
The block diagram of the system is depicted in Fig.l. 

Coding Scheme: The source samples are grouped into blocks of size m 

and the encoder is a mapping : — > R" which satisfies the power constraint E[\\fm{V'^) |p] < 
nP. Let us define the parameter p = n/m = Wc/Wg. In this paper we assume that p = 1, i.e., 
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Fig. 1. Block diagram of the secure joint source-channel coding problem with side information known at the receiver. 



m — n. The received signals by the intended receiver and the eavesdropper are given by 



(2) 



where X" = /„(K"), W ~ A^(0, iViI„), 1^'" - Af{0, iVsIn), and is the n x n identity matrix. 
The decoder at the intended receiver is a mapping : R"^ ^ M". The average squared-error 
distortion of the coding scheme at the intended receiver is given by 



Th 



(3) 



where V'^ — gn{Y'^). For the purpose of analysis, we will consider sequences of codes (/„, Qn), 
where n is increasing. The asymptotic performance of the code is given by 



D{N^,N2) = lim Dn{fn,gn,N,,N2). 



(4) 



Note that the above D is also a function of > 0, P > 0, > 0, and p > 0, but we assume 
that these parameters are known and fixed, and therefore express D as a function of {Ni, N2). 
In subsequent sections, we refer to D as mean-squared distortion and omit the bar superscript 
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and denote it by D, i.e., D — D. 

Secrecy Requirements: The eavesdropper obtains Z". Tlie secrecy of tlie system is measured 
by the information leaked to the eavesdropper and is expressed as follows 

h^-I{V^;Z^). (5) 
n 

Note that = corresponds to the perfect secrecy condition and implies that the eavesdropper 
obtains no information about the source. In this paper we consider the situation in which the 
leakage information is known and is a fixed constant. 

Distortion Exponent: In practical scenarios, the transmitter usually does not have an exact 
knowledge of the actual noise power at the intended receiver and the eavesdropper. The trans- 
mitter, however, knows an upperbound for the noise power of the intended receiver and also 
knows a lowerbound for the noise power of the eavesdropper. Let us denote the upperbound 
noise power of the intended receiver and the lowerbound noise power of the eavesdropper by 
A^i and N2, respectively. Therefore, the transmitter designs its coding scheme based on the noise 
power of A^i and N2 such that A^i > Nia and N2 < A^2a> where A^i^ and A^2a are the actual 
noise variances corresponding to the actual SNRia = and SNR2a = j^, respectively. 
The eavesdropper channel is still a degraded version of the main channel and is assumed to 
have the lowest SNR2a < SNR2 < SNRi < SNRia, where SNR2 = ^ and SNRi = ^. 
The intended receiver is assumed to have a perfect estimate of SNRia, but the transmitter 
communicates at a lower designed SNRi. In this scenario, we expect a graceful degradation of 
distortion D(SNRia, SNR2) with SNRi^ compared with D{SNRi,SNR2) when the actual 
SNRia > SNRi. Let us define the distortion exponent as follows: 

Definition 1: For a fixed SNR2, the distortion exponent of D(SNRia, SNR2) is given by 

A_ ^.^ log D{SNRia,SNR2) 

SNRia-^oo log SNRia 

The highest possible distortion exponent is p and therefore, < C < P- The distortion exponent 
can be used as a criterion for the robustness of a coding scheme. A high distortion exponent 
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means that the coding scheme is more robust against the case of SNR mismatch where we design 
the scheme to be optimal for a channel noise variance of A^^i, but the actual noise variance is Nia. 
In this paper, we propose two robust coding schemes which achieve the optimum mean-squared 
distortion and analyze them for SNR mismatch. Before introducing our proposed schemes, we 
need to review some related works in this area. 

C. Related Works 

1 ) Digital Wiretap Channel: In a digital wiretap channel (without any interference S), a digital 
message M G {1, 2, nCs} is transmitted to the intended receiver while the eavesdropper is kept 
ignorant. Wyner in |l2l characterized the secrecy capacity of this channel when the eavesdropper's 
channel is degraded with respect to the main channel. Csiszar et. al. in ^ considered the general 
wiretap channel and established its secrecy capacity. Let us assume X, Y and Z to be the channel 
input, intended receiver's signal and eavesdropper's signal, respectively. The secrecy capacity of 
a wiretap channel is given by 

Cs = max 2W, [I{U; Y) - I{U; Z)] , (7) 

P{u,x) 

where U ^ X Y Z forms a Markov chain. When the channels are AWGN, [fTTl has shown 
that the secrecy capacity is given by 

Here, we briefly explain the coding scheme. We Generate 2"^*^^'^^ Gaussian codewords U"^ and 
throw them uniformly at random into 2"*^= bins. Each bin thus contains 2"^*^^'^) codeword f/". To 
encode the message M E {1, 2, 2^^} randomly choose a f/" from the bin which is indicated 
by M and send it. The intended receiver seeks for a t/" which is jointly typical with F" and 
declares the bin index as the transmitted message. The probability of error asymptotically tends 
to be zero, i.e., lim„^oo Pe{M ^ M) — )• 0. The information leakage is lim„^oo ^H^j -^") = 0- 
When If is not zero but is a fixed known constant, we have the following Lemma: 

Lemma 1: In a digital wiretap channel, the information leakage rate to the eavesdropper is 
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for the rate of 



Rh— Cs + 1, 



(9) 



iog(i + ^) - iog(i + ^; 



Proof: Let M be the secret message. The transmission rate is then given by 

H{M) 



n 



(10) 



According to the security analysis of [fT3l . by applying Theorem 1 of [fT3l to our problem setup 
we obtain the following inequality, 



ii"(M|Z") 



n 



iog(i + 1-) - iog(i + 



(11) 



By combining (fTOl) and (fTTI) . we have 

H{M\Z 



Rj 



log(l + ^) - log(l + ^) 



H{M) 

The left side of the above inequality can be simplified as follows: 



(12) 



H{M\Z'')_ H{M\Z'') - H{M) + H{M) 

IhT ^ — IIT ; ; 

' H{M) ' H{M) 

(a) p H{M)-nh 



(13) 



H{M) 



Rl - le 



where (a) follows from the definition of in ([5]), and (6) follows from (flOl) . Thus, we can 
bound i?r as 



Ri. < 



log(l + ^) - log(l + ^) 



(14) 



Therefore, the maximum rate for Rj^ can be obtained by choosing 



Ru = 



iog(i + ^)-iog(i + ^; 



(15) 
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2) Digital Wyner-Ziv Coding: Consider a (non-secure) source coding problem with side 
information known at the receiver. The rate distortion function with side information Ry'(D) 
is defined as the minimum rate required to achieve distortion D if the side information V' is 
available to the decoder. Precisely, Ryf (D) is the infimum of rates R such that there exist maps 
in /„ : V" ^ {1, 2"^}, and : V'" x {1, 2"^} ^ V" such that 

lim supErf(r",(7„(V^'",/„(V"))) < D. (16) 

n— >oo 

Wyner-Ziv coding scheme achieved the entire curve Ry/ (D) as in the following theorem. 

Theorem 1: [|2l [Rate distortion with side information] Let (V, V') be drawn i.i.d. according 
to the joint distribution p{v, v) and let (i(f {)") = ^ d{vi, Vi) be given. The rate distortion 
function with side information is given by 

Ry'{D)= minmin|/(f/;F) -/(f/;\/')| (17) 
p{u\v) g I J 

where the minimization is over all functions g : V x U V and conditional probability mass 
functions p{u\v), \Vl\ < \V\ + 1, such that 

^ ^^Piv, v')p{u\v)d{v, g{v\ u)) < D. (18) 

The function g in the theorem corresponds to the decoding map that maps the encoded version 
of the V symbols and the side information V' to the output alphabet. We minimize over all 
conditional distributions on U and functions g such that the expected distortion for the joint 
distribution is less than D. Here, we briefly explain the Wyner-Ziv achievability scheme: Fix 
p{u\v) and the function g{u,v'). Calculate p{u) = ^^p{v)p{u\v). 

Codebook Generation: Let Ri = KV; U) + e. Generate 2"^^ i.i.d. codewords t/"(s) ~ 
nr=iP(«*)' and index them by s G {1, 2, 2"^i}. Let R2 = I{U] V)-I{U; V') + 5e. Randomly 
assign the indices s E {1,2,..., 2"^^} to one of 2"^^ bins using a uniform distribution over the 
bins. Let B(i) denote the indices assigned to bin i. There are approximately 2"^^^"^^) indices 
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in each bin. 

Encoding: Given a source sequence V", the encoder looks for a codeword f/"(s) such that 
{V"',U^{s)) G A*^"'' . If there is no such the encoder sets s = 1. If there is more than 
one such s, the encoder uses the lowest s. The encoder sends the index of the bin in which s 
belongs. 

Decoding: The decoder looks for a f/"(s) such that s G B{{} and (f/"(s), V'") G A^*^"^ . If 
it finds a unique s, it then calculates V", where Vi = f{Ui, V-). If it does not find any such s 
or more than one such s, it sets V'" = v^, where is an arbitrary sequence in V". It does not 
matter which default sequence is used; it is shown that the probability of this event is small. 

III. Separation Based Scheme With Wyner-Ziv Coding and the Pure Analog 

Scheme 

In this section, we first analyzed the separation based scheme in which the source is initially 
quantized and then transmitted using an optimum channel coding scheme. Next, we evaluate 
an uncoded analog scheme in which an optimum scaling version of the the source signal is 
transmitted. 

A. secure digital Wyner-Ziv coding scheme 

In this section we consider the problem described in Fig. 1. We use a separation scheme with 
an optimum Wyner-Ziv code followed by an optimum channel code. We refer to this scheme as 
the "secure digital Wyner-Ziv coding scheme". We show that this scheme achieves the optimum 
possible distortion. 

If we suppose that the side information V' is also available at the encode, the transmitter 
therefore requires sending the remaining information T. In Q the rate distortion problem for 
Shannon cipher system is considered. It can be seen from Theorem 1 in |l6l by setting = 0, 
the Shannon cipher system reduces to the wiretap channel setup and the optimum distortion 
can be achieved by separate source coding followed by digital wiretap channel coding scheme. 
Therefore, for a fixed leaked information we first need to quantize the source T" to at 
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Fig. 2. a) Block Diagram of the Encoder of the Separation Based Scheme, b) Block Diagram of the Analog Encoder 

a rate Cg — ^ log ^1 + — | log ^1 + and then transmit V^. Thus, we can achieve the 
optimum distortion of 



(19) 



In the problem of Fig.l., assume that a genie informs the transmitter about the side information 
V'. Therefore, the above distortion is an upperbound for the problem of Fig.l, i.e., D* is the 



minimum possible value for distortion D = E 



\V-V\ 



We show that the same distortion 



can be achieved in the setup of Fig.l by using the secure digital Wyner-Ziv coding scheme. 
Fig.2. a) shows the separation based scheme. The following theorem illustrates this result. 

Theorem 2: In the problem of secure transmitting a discrete-time Gaussian analog source over 
a Gaussian wiretap channel with side information known at the intended decoder, a separation 
based scheme can achieve the optimum distortion of D*. 

Proof: The achievability scheme is secure digital Wyner-Ziv coding scheme. Let C/ be an 
auxiliary random variable given by 



(20) 
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where F ~ J\f{0,D). We generate an n-length i.i.d Gaussian codebook U with 2"^^^'^) code- 
words, where each component of a codeword is Gaussian with zero mean and variance aa'^ + D. 
We then evenly distribute them into 2"^^'^^^ bins, where Ry'iD) = I{U;V) - I{U;V'). Let 
i{u") be the index of the bin containing u^. For each find a such that {u^, v"') are strongly 
jointly typical, i.e., (m", v'^) e At^"\ The index i(u"') is the Wyner-Ziv source coding index. The 
transmitter then encoded the index using an optimal secure channel code of rate arbitrary 
close to Cs and transmit it over the channel. The receiver decodes the index {(u^) with high 
probability. Next for the decoded i{u^) we look for an it" in the bin whose index is i{u") such 
that e A*e^"'\ We make an estimate for source i;" from the decoded and i;'" as 

follows: 




where we need to determine Ai and A2 such that the distortion D — E{\v"' — v'^\^} is minimized. 
After some math, the optimum values for Ai and A2 are as follows: 

Ai= x/S (22) 
A2= 1 — a, 

and the related distortion is given by 

L> = (1 - a)al (23) 



13 



To calculate the coefficient a, note that 

RyiD)=I{U;V)-I{U;V') (24) 
1 / aa^\ 1 ( OLo'^i \ 

2^\aa1^Cial,^D D j 
(a) 1 [ aal + D \ 

where (a) follows from the fact that = o"^, + af. 

According to the fact that Ry' (D) must be equal to Cs + h we have, 



a 



D 

~2 



a 



(25) 



From (|23]) and (1251) the achieved distortion is given by 



D-- 



cr: 



r,2I, P+Ni N2 

P+N2 Ni 



(26) 



D* 



B. Uncoded Scheme 

In this section we analyze a simple uncoded scaling scheme (Fig. 2. h)) in which the transmitter 
signal is given by 



X = aV, 



(27) 



where a < J The intended receiver's and the eavesdropper's signals are therefore given by 



Y= aV + W, 
Z= aV + W' 



(28) 



14 



For a fixed leakage infonnation, is given as follows: 



/, = /(V;Z) = -log^l+ 



(29) 



From the above equation we can see that the choice of a = 4/-^ results in a reasonably high 
information leakage rate. We can, however, reduce the value of a to satisfy our fixed information 
leakage to the eavesdropper. Therefore, a is given by 



(30) 



The intended receiver makes an estimation of V based on the received signal Y and the side 
information V' . The estimated signal is therefore as follows: 



XiY + X2V 
= aXiV + XiW + X2V' 



(31) 



The corresponding distortion Du is given by 



Du^E 



E 



V -V 

(aAi - 1)V + XiW + X2V' 



(32) 



= (aAi - if al + XlN^ + A^aJ + 2A2 (aAi - 1) . 

After some algebra, the optimum values for Ai and A2 which minimize distortion D„ are are 

given as follows: 



Ai= 

A2 = 



(33) 
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By substituting (|30l) and (|331) into (|321 ). the minimum distortion in this uncoded scheme is given 
by 

Du = -TTT^ . (34) 

IV. Secure Joint Source-Channel Coding Schemes with Side Information at 

THE Receiver 

In this section, we propose two different secure joint source-channel coding schemes which 
achieve the minimum distortion of D*. The first proposed scheme does not involve quantizing 
the source explicitly while the second proposed scheme is a superimposed digital and the first 
hybrid scheme. 

A. Secure Hybrid Digital-Analog Wyner-Ziv Coding Scheme 

In this scheme, the encoder does not quantize the source explicitly, however it treats the source 
signal as a digital message. We generate the auxiliary random variable U as follows: 

U = X + kV, (35) 

where k is defined as /c^ = ^ 

Codebook Generation: We generate a random i.i.d codebook W with 2"^('^'^) sequences, where 
the components of the codewords are zero mean Gaussian random variables with variance P + 
fc^cr^. We then distribute the generated codewords into 2"^ bins. This codebook is shared between 
the encoder and the intended receiver's decoder. 

Encoding: For a given t>" the transmitter finds m"'s such that are strongly jointly 

typical, i.e., G A*J^^\ The transmitter randomly chooses one of and then sends 

= — A;t>". This is possible with arbitrary high probability if i? > I{U ; V) — I{U ; V') 
Decoding: The intended receiver's signal is = + w". The intended decoder finds a 
such that (t> y", m") G Af'\ A unique such can be found with high probability if 
R < I{U; V', Y)-I{U; Z). We next show that we can choose R to satisfy I{U; V)-I{U; V') < 



PN2 r,2L 

P+N2 



P+Ni 



and X ~ Ar(0,P). 
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R < I{U-V\Y) - I{U-Z). Equivalently, we show that with k'^ = ^.^^pj^l^f^^^^^ 
I{U; V) - I{U; V') < I{U; V ,Y) - I{U; Z). Note that after some manipulation 



1 fP + k^a^ 
= - loff 

2 ^ V P 



, we have 



and 



It is easy to see that for k'^ 



PN2 r,2I, _ PNl 

P+N2 P+Ni 



, always we have I{U; V) - I{U; V') < 



I{U;V\Y) — I{U;Z). The intended decoder therefore can estimate the transmitted signal v'^ 
from u", and as follows: 



^ = ( Ai 



A2 A3 



(36) 



where ^ Ai A2 A3 j are the coefficients of the linear MMSE estimate which minimize D = 
V — VW^ . After some math, the optimum choices for the coefficients the the related 



E 



distortion given as 



Ai= 
X2-- 



ka^ 



I PNl 



(37) 
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Fig. 3. Block Diagram of the Encoder of the Superimposed Digital and Hybrid Digital-Analog Wyner-Ziv Scheme 

B. Superimposed Secure Digital and Secure Hybrid Wyner-Ziv Coding Scheme 

In this scheme, the transmitted signal is a superposition of two signals Xi and X2, which 
are the outputs of a digital Wyner-Ziv encoder and a hybrid digital-analog encoder, respectively. 
Fig. 3. illustrates the streams of the transmitter for this scheme. 

The first stream uses a digital rate R Wyner-Ziv code to quantize the source signal assuming 
that the side information V' is known at the receiver. The discrete quantized index is then 
encoded using an optimal wiretap chaimel code to produce the codeword Xi. We allocate the 
following power to this stream 



The second stream uses the previous proposed hybrid digital-analog Wyner-Ziv scheme and 
produces the output signal X2. The auxiliary random variable of this scheme is given by 



where X2 and V are independent and X2 ~ M{Q.,Phwz), where the allocated power to this 




(39) 



P + N2-{P + Ni) 2-2« 



U = hV + X2, 



(40) 
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stream is given by 



^^^^ P + N,-{P + N,)2-^R ■ ^^^^ 



We also chose kf as follows 



1 



— — 



Phwz Phwz 



(42) 



where a~ — cr|2~^^. 

The two streams of Xi and X2 are superimposed at the transmitter through the channel. The 
received signal at the intended receiver is is given hy Y — X1 + X2 + W. The intended decoder 
first decodes Xi by assuming that + is an independent noise and extracts the Wyner-Ziv 
encoded bits (index). Next, along with the side information V' , the intended decoder maked an 
estimate of the source. Let us denote this estimation by V. The source signal and the estimated 
signal of V are related as follows: 

V^V + f, (43) 

where a~ can be calculated as follows. Let us denote the quantized signal by V*. Thus, 

V^V* + E, (44) 

where E is the quantization error and E ~ A/^(0, a^2~^^) is independent of V*. The intended 
receiver knows the signals V* and V', where 

V^V' + T. (45) 

Let A be the covariance matrix of {V*, V')'^ and F be the correlation between V and {V*, V')'^. 
Then A and F are given by 



2 



V* 0-2 

a', 

V 



and F= (^2, aj) (46) 
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Therefore, 



a|= al - r^A-'r (47) 

When the digital part is first decoded and canceled from the intended receive signal, we have 
an equivalent channel for the hybrid digital-analog Wyner-Ziv scheme with power constraint of 
Phwz- The intended receiver finally makes an estimate of V using hybrid digital-analog Wyner- 
Ziv decoder from the new side information V. The observe equivalent channel is Y — Xi. 
According to the previous subsection, the achievable distortion is given as follows: 

^~ Phwz+Ni N2 02L 
PHWZ+N2 Ni 

(a) a^A 



P+N2 Ni ^ 



P+Ni N2 n2L 
P+N2 Ni ^ 

= D\ 

where (a) follows from (|4TI) . The optimal distortion D* can be achieved for any rate R which 
< -R < C, where C = |log ( jp^^l ^ j is the capacity of the wiretap channel. Therefore, 
there are infinitely many schemes which achieve the optimal distortion. In the special case that 
Phwz = P (and therefore R = 0) this scheme converts to the scheme of pervious subsection. 
Similarly, when Phwz = (or equivalently R = C), this scheme is equivalent to the separated 
based scheme. 

V. SNR Mismatch Analysis 

In this section, we evaluate the performance of our propose secure hybrid digital- analog Wyner- 
Ziv schemes for the case of SNR mismatch where we design the scheme to be optimal for a 
designed SNRi such that SNR2 < SNRi < SNRia, but the actual SNR is SNRia. It is 
well known that separation based scheme suffers from a pronounced threshold effect; when the 
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actual SNR is worse than the designed SNR, the index cannot be decoded and when the actual 
SNR is better than the designed SNR, the distortion is limited by quantization and therefore, 
the distortion does not improve. We show that however our proposed secure joint source-channel 
coding schemes offer better performance in this situation. 

Let us first consider our first proposed secure joint source-channel coding scheme. The intended 
receiver can decode u" when the SNRia is better than the designed SNRi and make an estimate 
of the source from the observations at the receiver. The signals are given as follows: 



U^X + kV 
V^V' + T 

Y^X + Wa 

z^x + w', 



(49) 



where k — 



PN2 02L _ PNi 
P+N2 P+Ni 



, W ~ J\f{0,Nia). The intended receiver uses an optimal 
linear MMSE to estimate the transmitted signal V from the observations of [U, V\Y]. Note that 
this receiver knows the exact value of A^i^, but the transmitter chooses the parameter k based 
on the designed A^i. Let A be the covariance matrix of {U,V\Y)'^ and F be the correlation 
between V and {U,V\Y)'^ . Thus, 



and 



[ P + k^al k{al-al) P \ 

V ^ P + N^aJ 



T 

^{kal al-al o) ■ 



(50) 



(51) 



The coefficients of the linear MMSE estimate are given by A ^F. After some math, the actual 
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distortion is then given by 



Da= at - r^A-^r (52) 

,2 



0-,, 



k''aUP + Nia) + PN^a 



,2 



(a) (TtNia 



N2 02J, _ A^i 
P+N2 P+Ni 



[P + N,a] + N,,' 



where (a) follows by substituting k. As we can see, this scheme has the distortion exponent 

C = i- 

Now let us consider the superimposed secure digital and secure hybrid Wyner-Ziv coding 
scheme. The intended receiver can decode the digital part (Xi) when the actual SNRia is better 
than the design SNRi . When the digital part is decoded and canceled from the intended receiver 
signal of Y = Xi + X2 + Wa, we have an equivalent hybrid digital-analog Wyner-Ziv coding 
scheme with the side information of V (see equation (l43l) ) available at the intended receiver 
and the power constraint of Phwz (see equation (|4TI) ). The achievable distortion at the intended 
receiver is therefore given by 



Da = at - r^A-^r 



(53) 



where here A is the co variance matrix of (f/, V, F — Xi)^ and F is the correlation between V 
and (f/, V — Xi)^, where U and ki are given in and (|42|) . respectively. Thus, 



and 



I PHWz + klal ki{at-af) Phwz \ 



A 



ki{at-ai) at-ai 



HWZ 



Phwz + Nia J 



(54) 



k.al 



ol-al 



(55) 
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The coefficients of the linear MMSE estimate are given by A ^T. After some math, the actual 
distortion is then given by 

D,= al - r^A-^r (56) 



kfaf {Phwz + Nia) + PuwzNia 



CjPHWzNia 



klal [Phwz + N^a) + PuwzNia 

(a) (T~Nia 



(6) o\2-^^ 



N2 o2L A^i 

Nia(PHWZ+N2)^ Nia{PHWZ+Ni) 



[Phwz + A^ia] + 1 



, - n-29-2/? 



N222I^{N2-Nla){P+Nl)2-'2Ii + {P+N2){Nla-Ni) _ Nl{N2-Nla){P+Nl)2-^'i + {P+N2)iNla-Nl) , . 

Nla{N2-Nl)(P+N2) NlaiN2-Nl){P+Nl)2~2R ^ 

where (a) follows by substituting ki, (b) follows by substituting a~ = af2~'^^, and (c) follows 
by substituting Phwz from (f4T)) . As we can see, this scheme has the distortion exponent C = 1- 
It is useful to mention that for the uncoded scheme of section III-B, the distortion is given 
by (|34|) which may be written as follows: 

Du = -2 . (57) 

Though the above equation shows that the distortion exponent C is 1, we have a considerable loss 
in optimality at the intended receiver, as we have not used the full power P at the transmitter. 

Fig. 4 Compares the performance of the secure hybrid coding scheme, superimposed scheme 
and the analog coding scheme with the separation based scheme. In this figure, P = 10, SNRi = 
10, SNR2 = 7, 10 < SNRia < 50, I, = 0.2, R = 0.15, = 8, and = 5. As shown in this 
figure, our proposed hybrid schemes provide the optimum distortion when the transmitter has 
the exact value of the SNRia and is more robust against the SNR mismatch compared with 
digital Wyner-Ziv Coding scheme. 
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_10l 1 1 1 1 1 1 1 1 

10 15 20 25 30 35 40 45 50 

SNR^^=10log(P/N^^) 

Fig. 4. Performance of the secure hybrid digital-analog Wyner-Ziv coding scheme compared with the separation based scheme. 

VI. Conclusions 

We considered the problem of transmitting an i.i.d Gaussian source over an i.i.d Gaus- 
sian wiretap channel with side information available at the intended receiver. We showed that 
Shannon's source-channel separation coding scheme is optimum in the sense of achieving the 
minimum distortion. We then proposed two hybrid digital- analog secure joint source-channel 
coding schemes which achieve the minimum distortion. Our coding schemes were based on 
the Wyner Ziv coding scheme and wiretap channel coding scheme when the analog source 
is not explicitly quantized. We analyzed our secure hybrid digital- analog schemes under the 
main channel SNR mismatch and showed that that our proposed schemes can give a graceful 
degradation of distortion with SNR under SNR mismatch, i.e., when the actual SNR is larger 
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than the designed SNR. 
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